CyberSec.Space Logo
CVEブラウザに戻る

CVE-2021-42237

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score79.9940%
EPSS Percentile87.66th
Published2021-11-05
Last Modified2026-07-09
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 http://packetstormsecurity.com/files/164988/Sitecore-Experience-Platform-XP-Remote-Code-Execution.html
🔗 https://blog.assetnote.io/2021/11/02/sitecore-rce/
🔗 https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1000776
🔗 http://packetstormsecurity.com/files/164988/Sitecore-Experience-Platform-XP-Remote-Code-Execution.html
🔗 https://blog.assetnote.io/2021/11/02/sitecore-rce/
🔗 https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1000776
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42237

関連する脆弱性情報

CVE-2026-674394.3

OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/...

CVE-2026-674386.6

OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/execu...

CVE-2026-674377.5

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/...

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...